Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/NGjcJESkWKoe17DLj5CiFkjFkhs.roa
File: NGjcJESkWKoe17DLj5CiFkjFkhs.roa (raw, json)
Hash identifier: GPilr/syUwSnDgvatxbmfR2uNG9m+2J2hRVuK9V/K4A=
Subject key identifier: 34:68:DC:24:44:A4:58:AA:1E:D7:B0:CB:8F:90:A2:16:48:C5:92:1B
Certificate issuer: /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Certificate serial: 019423690D1BE1553D69B78F9229A990023C
Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/NGjcJESkWKoe17DLj5CiFkjFkhs.roa
Signing time: Wed 01 Jan 2025 19:47:54 +0000
ROA not before: Wed 01 Jan 2025 19:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8708
IP address blocks: 194.105.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:0d:1b:e1:55:3d:69:b7:8f:92:29:a9:90:02:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Validity
Not Before: Jan 1 19:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3468dc2444a458aa1ed7b0cb8f90a21648c5921b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:76:55:82:ec:a1:9d:f9:47:84:8b:a4:5c:66:
78:e8:f3:88:b5:b5:c3:78:06:36:8d:20:e2:e9:00:
19:c4:fe:c5:1e:95:f6:a3:49:29:1e:aa:cd:f0:5b:
e3:8a:ba:7c:8f:34:76:81:a9:2d:db:97:a2:3f:1a:
ec:93:02:95:7c:fb:c1:f3:27:dd:75:2b:a7:03:4e:
1a:5a:30:f2:80:2d:b9:75:6b:39:3c:55:fc:be:e4:
13:2a:2c:8e:3d:64:78:af:e6:a4:ea:77:6c:b9:e8:
95:f5:b3:96:73:d3:25:31:20:0e:3c:14:1a:11:df:
c2:2f:99:e6:0a:ff:aa:93:01:70:44:e8:23:ab:ad:
e8:68:df:93:40:92:1c:bd:0e:7c:49:57:6c:3c:e4:
79:e2:c8:56:8c:c3:7a:80:27:6c:86:06:72:a3:6b:
e3:e3:8d:e8:ef:06:d1:83:5f:06:52:2f:2a:32:17:
98:f8:40:fc:56:48:84:41:7d:1d:e2:e8:e7:ef:cb:
72:7d:c0:a5:ee:eb:61:36:62:5a:52:fd:64:f4:5a:
dc:1c:74:d7:ae:01:08:ec:d4:5c:97:c9:75:22:d4:
6c:77:f6:b7:c0:c8:93:4f:c2:b9:12:0b:04:e2:6f:
0c:99:4a:04:83:02:7d:5a:2c:ff:58:ea:e9:b9:2d:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:68:DC:24:44:A4:58:AA:1E:D7:B0:CB:8F:90:A2:16:48:C5:92:1B
X509v3 Authority Key Identifier:
keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/NGjcJESkWKoe17DLj5CiFkjFkhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.19.0/24
Signature Algorithm: sha256WithRSAEncryption
24:37:f1:51:ef:1b:7f:04:a4:d5:d2:39:bb:00:a4:54:0c:e5:
a5:7b:96:ca:71:ae:41:32:11:3b:7d:b2:f5:33:40:74:e9:a6:
6b:57:30:2e:86:f3:da:83:14:d1:f3:2d:c3:b6:f2:7f:e4:ff:
61:a0:19:b9:f1:f8:17:52:22:a4:2d:9b:e6:33:11:ec:14:3d:
aa:5f:39:0b:4a:a4:e2:65:2f:bd:44:cd:3c:63:a5:04:1f:fb:
cb:73:62:a5:a6:e3:64:15:a0:ca:00:2d:43:6d:be:fd:30:df:
d7:9f:21:06:5d:d9:70:2d:9f:01:fa:e1:0a:86:a4:d8:ff:f2:
6e:f0:44:f5:7c:d0:5f:96:e1:f7:34:da:c0:0a:2a:bf:62:53:
03:45:cb:29:99:95:8b:da:d6:cc:45:91:58:bb:90:34:5f:78:
56:e0:45:9b:ef:ee:08:83:66:dd:20:0d:d6:6d:1a:67:57:0e:
e8:ae:b4:e2:05:f4:7e:d7:24:75:66:3c:41:45:b1:41:d9:b1:
d3:7a:e1:5e:db:f9:8d:29:a8:27:93:00:12:97:88:73:e5:db:
07:17:cd:d1:47:74:9d:45:65:71:d8:bf:49:c8:70:39:e9:ef:
76:35:39:d7:3c:f3:35:00:e1:39:87:6d:52:9e:b7:8c:bd:da:
4f:cf:de:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:30:28 2025 by rpki-client